SPIDER® SPIDER®Command & Control · Powered by AI

Install the SPIDER® Root Certificate

SPIDER® is deployed on private infrastructure and uses an internal Certificate Authority. Install this root certificate once on your device so your browser and apps trust spiderc2.com and all its subdomains.

Download Root Certificate
spider-root-ca.crt · 2 KB · SHA-256, RSA 2048 · Valid until April 2036

Why is this needed?

SPIDER® runs on a self-hosted, air-gapped deployment. Public certificate authorities (Let's Encrypt, DigiCert, etc.) cannot issue certificates for an internal-only domain, so we operate our own internal CA — the SPIDER Platform Root CA.

Once you install this root certificate, your device will trust every server certificate signed by the CA, including app.spiderc2.com, tasl.spiderc2.com, frigate.spiderc2.com, and all 30+ other subdomains. You only need to do this once per device.

Choose your platform

Install on Windows (PC)

  1. Click the Download Root Certificate button at the top of this page. The file spider-root-ca.crt will save to your Downloads folder.
  2. Open File Explorer, navigate to Downloads, and double-click spider-root-ca.crt.
  3. Click Install Certificate…
  4. Choose Local Machine (recommended, requires Administrator) or Current User → Next
  5. Select Place all certificates in the following store → Browse…
  6. Pick Trusted Root Certification Authorities → OK → Next → Finish
  7. Confirm the security warning ("Yes, install this self-signed root").
  8. Close all browser windows and reopen, then visit https://spiderc2.com — you'll see the green padlock.
Quick PowerShell install (Administrator): 
Import-Certificate -FilePath "$HOME\Downloads\spider-root-ca.crt" -CertStoreLocation Cert:\LocalMachine\Root

Install on iPhone / iPad (iOS)

  1. On your iPhone, open this page in Safari and tap Download Root Certificate.
  2. Tap Allow when iOS asks to download a configuration profile.
  3. Open Settings → you'll see Profile Downloaded at the top — tap it.
    If you don't see it, go to Settings → General → VPN & Device Management → tap the SPIDER profile.
  4. Tap Install in the top-right, enter your passcode, and confirm Install again.
  5. This last step is critical on iOS: go to Settings → General → About → Certificate Trust Settings.
  6. Under Enable Full Trust for Root Certificates, toggle SPIDER Platform Root CA to ON.
  7. Open Safari and visit https://spiderc2.com — the padlock will appear.
Important: Steps 5 and 6 are required only on iOS. Without enabling the trust toggle, iOS treats the certificate as untrusted even after installation.

Install on Android

  1. Tap Download Root Certificate above. The file saves to your Downloads folder.
  2. Open Settings → Security (or Security & privacy on newer Android).
  3. Tap Encryption & credentials → Install a certificate → CA certificate.
  4. Confirm the warning about installing a CA, then browse to Downloads and select spider-root-ca.crt.
  5. Open Chrome and visit https://spiderc2.com — padlock will be green.
Note for Android 7+ apps: User-installed CAs work for Chrome and most browsers, but native apps that target API 24+ may ignore them by default. The official SpiderMobile® app is built to trust this CA.

Install on macOS

  1. Click Download Root Certificate above.
  2. Open Keychain Access (Spotlight: Cmd-Space, type "Keychain").
  3. In the sidebar, click System → drag spider-root-ca.crt from Downloads into the System keychain. Enter your admin password.
  4. Find SPIDER Platform Root CA in the list, double-click it.
  5. Expand Trust, change When using this certificate to Always Trust, close the window, enter your admin password again to save.
  6. Open Safari/Chrome/Firefox and visit https://spiderc2.com.
Terminal one-liner (admin): 
sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain ~/Downloads/spider-root-ca.crt

Install on Linux

  1. Download the certificate.
  2. For Debian / Ubuntu: 
    sudo cp ~/Downloads/spider-root-ca.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates
  3. For Red Hat / Fedora / CentOS: 
    sudo cp ~/Downloads/spider-root-ca.crt /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust extract
  4. For Firefox (uses its own trust store): Preferences → Privacy & Security → Certificates → View Certificates → Import → pick the file → check "Trust this CA to identify websites".

Need help? Email spider@tataadvancedsystems.com.